CVE-2020-6470
CVE-2020-6470
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.
CVSS 6.1 · Media · EPSS 1,0% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
chrome
- Versiones
- ≥ unspecified, < 83.0.4103.61: Afectada (custom)
Actualiza a 83.0.4103.61
chromium Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 83.0.4103.83-1
Actualiza a 83.0.4103.83-1
chromium Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 83.0.4103.83-1
Actualiza a 83.0.4103.83-1
chromium Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 83.0.4103.83-1
Actualiza a 83.0.4103.83-1
chromium-browser Ubuntu:16.04:LTS
- Versiones
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- 51.0.2704.79-0ubuntu0.16.04.1.1242
- 52.0.2743.116-0ubuntu0.16.04.1.1250
- 53.0.2785.143-0ubuntu0.16.04.1.1254
- 53.0.2785.143-0ubuntu0.16.04.1.1257
- 55.0.2883.87-0ubuntu0.16.04.1263
- 56.0.2924.76-0ubuntu0.16.04.1268
- 57.0.2987.98-0ubuntu0.16.04.1276
- 58.0.3029.81-0ubuntu0.16.04.1277
- 58.0.3029.96-0ubuntu0.16.04.1279
- 58.0.3029.110-0ubuntu0.16.04.1281
- 59.0.3071.109-0ubuntu0.16.04.1289
- 59.0.3071.109-0ubuntu0.16.04.1291
- 60.0.3112.78-0ubuntu0.16.04.1293
- 60.0.3112.113-0ubuntu0.16.04.1298
- 61.0.3163.79-0ubuntu0.16.04.1300
- 61.0.3163.100-0ubuntu0.16.04.1306
- 62.0.3202.62-0ubuntu0.16.04.1308
- 62.0.3202.75-0ubuntu0.16.04.1313
- 62.0.3202.89-0ubuntu0.16.04.1315
- 62.0.3202.94-0ubuntu0.16.04.1317
- 63.0.3239.84-0ubuntu0.16.04.1
- 63.0.3239.132-0ubuntu0.16.04.1
- 64.0.3282.119-0ubuntu0.16.04.1
- 64.0.3282.140-0ubuntu0.16.04.1
- 64.0.3282.167-0ubuntu0.16.04.1
- 65.0.3325.181-0ubuntu0.16.04.1
- 66.0.3359.139-0ubuntu0.16.04.3
- 66.0.3359.181-0ubuntu0.16.04.1
- 67.0.3396.99-0ubuntu0.16.04.2
- 68.0.3440.75-0ubuntu0.16.04.1
- 68.0.3440.106-0ubuntu0.16.04.1
- 69.0.3497.81-0ubuntu0.16.04.1
- 70.0.3538.67-0ubuntu0.16.04.1
- 70.0.3538.77-0ubuntu0.16.04.1
- 70.0.3538.110-0ubuntu0.16.04.1
- 71.0.3578.80-0ubuntu0.16.04.1
- 71.0.3578.98-0ubuntu0.16.04.1
- 72.0.3626.119-0ubuntu0.16.04.1
- 72.0.3626.121-0ubuntu0.16.04.1
- 73.0.3683.75-0ubuntu0.16.04.1
- 73.0.3683.86-0ubuntu0.16.04.1
- 74.0.3729.169-0ubuntu0.16.04.1
- 76.0.3809.87-0ubuntu0.16.04.1
- 76.0.3809.100-0ubuntu0.16.04.1
- 77.0.3865.90-0ubuntu0.16.04.1
- 78.0.3904.70-0ubuntu0.16.04.2
- 78.0.3904.97-0ubuntu0.16.04.1
- 78.0.3904.108-0ubuntu0.16.04.1
- 79.0.3945.79-0ubuntu0.16.04.1
- 79.0.3945.130-0ubuntu0.16.04.1
- 80.0.3987.87-0ubuntu0.16.04.1
- 80.0.3987.149-0ubuntu0.16.04.1
- 80.0.3987.163-0ubuntu0.16.04.1
- 81.0.4044.122-0ubuntu0.16.04.1
- 81.0.4044.138-0ubuntu0.16.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 84.0.4147.105-0ubuntu0.16.04.1
Actualiza a 84.0.4147.105-0ubuntu0.16.04.1
chromium-browser Ubuntu:18.04:LTS
- Versiones
- 61.0.3163.100-0ubuntu1.1378
- 62.0.3202.62-0ubuntu0.17.10.1380
- 62.0.3202.89-0ubuntu1.1386
- 62.0.3202.94-0ubuntu1.1388
- 63.0.3239.84-0ubuntu1
- 63.0.3239.108-0ubuntu1
- 64.0.3282.119-0ubuntu1
- 64.0.3282.140-0ubuntu1
- 64.0.3282.167-0ubuntu1
- 65.0.3325.146-0ubuntu1
- 65.0.3325.181-0ubuntu1
- 66.0.3359.139-0ubuntu0.18.04.3
- 66.0.3359.181-0ubuntu0.18.04.1
- 67.0.3396.99-0ubuntu0.18.04.1
- 68.0.3440.75-0ubuntu0.18.04.1
- 68.0.3440.106-0ubuntu0.18.04.1
- 69.0.3497.81-0ubuntu0.18.04.1
- 70.0.3538.67-0ubuntu0.18.04.1
- 70.0.3538.77-0ubuntu0.18.04.1
- 70.0.3538.110-0ubuntu0.18.04.1
- 71.0.3578.80-0ubuntu0.18.04.1
- 71.0.3578.98-0ubuntu0.18.04.1
- 72.0.3626.119-0ubuntu0.18.04.1
- 72.0.3626.121-0ubuntu0.18.04.1
- 73.0.3683.75-0ubuntu0.18.04.1
- 73.0.3683.86-0ubuntu0.18.04.1
- 74.0.3729.169-0ubuntu0.18.04.1
- 75.0.3770.90-0ubuntu0.18.04.1
- 75.0.3770.142-0ubuntu0.18.04.1
- 76.0.3809.87-0ubuntu0.18.04.1
- 76.0.3809.100-0ubuntu0.18.04.1
- 77.0.3865.90-0ubuntu0.18.04.1
- 78.0.3904.70-0ubuntu0.18.04.2
- 78.0.3904.97-0ubuntu0.18.04.1
- 78.0.3904.108-0ubuntu0.18.04.1
- 79.0.3945.79-0ubuntu0.18.04.1
- 79.0.3945.130-0ubuntu0.18.04.1
- 80.0.3987.87-0ubuntu0.18.04.1
- 80.0.3987.149-0ubuntu0.18.04.1
- 80.0.3987.163-0ubuntu0.18.04.1
- 81.0.4044.122-0ubuntu0.18.04.1
- 81.0.4044.138-0ubuntu0.18.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 83.0.4103.61-0ubuntu0.18.04.1
Actualiza a 83.0.4103.61-0ubuntu0.18.04.1
Fuentes originales
- https://chromereleases.googleblog.com/2020/05/stable-channel-update-for-desktop_19.html
- https://crbug.com/1065761
- https://security.gentoo.org/glsa/202006-02
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00034.html
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00038.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQYH5OK7O4BU6E37WWG5SEEHV65BFSGR/
- https://www.debian.org/security/2020/dsa-4714
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLFZ5N4EK6I4ZJP5YSKLLVN3ELXEB4XT/
- https://security.gentoo.org/glsa/202101-30
- https://nvd.nist.gov/vuln/detail/CVE-2020-6470